PT-2025-25753 · Unknown · Microlight.Js

Rootingg · Published 2025-06-17 · Updated 2025-06-17 · CVE-2025-45525

Positive Technologies (AI Summary)

CVSS v3.1

2.9

Low

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions microlight.js version 0.0.7

Description A null pointer dereference issue was discovered in a lightweight syntax highlighting library. The library fails to validate the result of a regular expression match before accessing its properties when processing elements with non-standard CSS color values, leading to an uncaught TypeError and potential application crash.

Recommendations For microlight.js version 0.0.7, consider updating to a newer version that addresses this issue, as the current version fails to properly handle non-standard CSS color values, leading to potential application crashes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2025-45525

GHSA-64X7-M7RH-9M83

Affected Products

Microlight.Js

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-45525 · Security Note
• https://osv.dev/vulnerability/GHSA-64x7-m7rh-9m83 · Vendor Advisory
• https://github.com/github/advisory-database/pull/5730 · Note
• https://github.com/asvd/microlight · Note
• https://twitter.com/VulmonFeeds/status/1935122338514706816 · Twitter Post
• https://gist.github.com/Rootingg/843368931f70886bed3cf982f10a4424 · Note
• https://twitter.com/CVEnew/status/1935069328212160688 · Twitter Post